Gah, ok, I was pretty sure I tried this before, and this failed to work, but it's working now.

I do know that the quoting functions that occur during the execute do try to "\" the existing backslashes as based on the mysql log, so there's some issues with other quoted characters, but since ';' has no apparent special meaning in regex, I can not worry about escaping it, and the resulting regex gets passes untouched to mysql.

I will still need to minimize the character set that the cgi param will pass to this, of course, but forutnately, all I have is A-Za-z0-9\- for this column, so that will make it easy to do.